You are here

Fortinet's FortiClient Awarded U.S. and Canadian Government FIPS Security Certification

FIPS 140-2 Levels 1 and 2 Certification Expands Federal Market Opportunity for Robust Device Protection

SUNNYVALE, Calif. - June 5, 2008 - Fortinet® - the pioneer and leading provider of unified threat management (UTM) solutions - today announced that its FortiClient™ PC Endpoint security software earned the coveted Federal Information Processing Standards (FIPS) 140-2 levels 1 and 2 certifications from the National Institute of Standards and Technology (NIST). These credentials build on Fortinet's commitment to providing multi-threat protection to U.S. government agencies and extend the company's market opportunity and existing foothold in the federal market.

Fortinet's FortiClient product provides unified security agent features for personal computers and laptops, including personal firewall, IPSec VPN, antivirus, antispyware, antispam and Web content filtering. FortiClient software works in conjunction with Fortinet's FortiGate™ multi-threat security appliance to provide broad network protection for federal customers, especially mobile and remote workers.

Government agencies that can only purchase FIPS-certified cryptographic modules are now able to use FortiClient PC Endpoint for broad desktop and laptop security protection. While remote access for government employees has increased efficiency for federal agencies, it has also exposed them to more threats, such as viruses, spam, spyware and worms. The FIPS certification was created to address these threats by requiring a higher level of performance from cryptographic modules used in federal government agency networks. FortiClient allows agencies to support network access for remote users, while ensuring networks are protected through personal firewall, antivirus, antispyware, antispam and IPSec VPN.

"The FIPS certification will allow us to expand our recognized dedication to federal agencies and offer them FortiClient for device protection," said Jeff Lake, vice president of federal operations at Fortinet. "More than a government agency requirement, FIPS has become a de facto benchmark for many organizations when evaluating security solutions."

FortiClient is powered by FortiGuard™ Security Subscription Services to provide devices with broad, automated and up-to-date protection against today's blended threats. The FIPS-certified FortiClient is available on Microsoft® Windows XP™ and Microsoft Vista™ operating systems.

Fortinet solutions have won multiple awards around the world and are the only security products that are certified in seven programs by ICSA Labs (firewall, antivirus, IPSec, SSL, network IPS, anti-spyware and anti-spam). In addition, the majority of FortiGate platforms have already completed numerous government certifications including FIPS 140-2 Level 2, NIAP Common Criteria EAL4+, and IPv6. Fortinet is the only firewall vendor currently submitted for testing under the NIAP Common Criteria EAL4+ Medium Robustness v2.0 Protection Profiles, the most stringent security standard available, with an expected completion date in 2009.

For more information regarding NIST and FIPS or to view the Fortinet certificates, visit: http://www.nist.gov or http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2008.htm.

About FIPS:

FIPS is a set of standards that describe document processing, provide standard algorithms for searching and provide other information processing standards for security modules used to protect government networks. The Cryptographic Module Validation Program (CMVP), headed by NIST, provides module and algorithm testing for FIPS 140-2, which applies to Federal agencies using validated cryptographic modules to protect sensitive government data in computer and telecommunication systems. FIPS 140-2 provides stringent third-party assurance of security claims on any product containing cryptography that may be purchased by a government agency.

About Fortinet (www.fortinet.com)

Fortinet is the pioneer and leading provider of ASIC-accelerated unified threat management, or UTM, security systems, which are used by enterprises and service providers to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including firewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging a custom ASIC and unified interface, Fortinet solutions offer advanced security functionality that scales from remote office to chassis-based solutions with integrated management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certified in six programs by ICSA Labs: (Firewall, Antivirus, IPSec, SSL, Network IPS, and Anti-Spyware). Fortinet is privately held and based in Sunnyvale, California.

Copyright © 2008 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and unregistered trademarks of Fortinet, Inc., its subsidiaries and affiliates, including, but not limited to, the following trademarks: Fortinet, FortiGate, FortiGuard, FortiManager, FortiMail, FortiClient, FortiCare, FortiAnalyzer, FortiReporter, FortiOS, FortiASIC, FortiWiFi, FortiSwitch, FortiVoIP, FortiBIOS, FortiLog, FortiResponse, FortiDB, APSecure, and ABACAS. Other trademarks belong to their respective owners.

How to Buy

Purchase Fortinet Products


We handle a lot of very confidential and time sensitive data for which security is absolutely essential. So, when we decided to move our existing services and systems online for more efficiency, we had to ensure that not only our data would be protected but also that our network would maintain its high performance, delivery throughput and high availability. Fortinet's FortiGate-800 systems provided the performance, flexibility and security we were looking for. Combined with other networked solutions deployed by DPS, we felt that it was the most effective solution for us.

Bob Thomson
Senior Manager, IT Projects
UAE Central Bank